Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136302e302f32302d3332203d3e20323632353037.roa
File:                     3137372e35352e3136302e302f32302d3332203d3e20323632353037.roa (raw, json)
Hash identifier:          el1Hf0jD1R6/66epID7rvHloP9WzYLRTify9aW6lDnc=
Subject key identifier:   68:0B:98:9C:79:0A:4E:C8:4D:C7:C4:81:15:5F:7F:BB:77:EE:B9:ED
Certificate issuer:       /CN=FACBE837964A181010E5EBCBABD77E727EBA0A71
Certificate serial:       42E488AE6934BB0285B2EBC9E125D27BA2368626
Authority key identifier: FA:CB:E8:37:96:4A:18:10:10:E5:EB:CB:AB:D7:7E:72:7E:BA:0A:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136302e302f32302d3332203d3e20323632353037.roa
Signing time:             Sat 14 Jun 2025 13:32:08 +0000
ROA not before:           Sat 14 Jun 2025 13:27:08 +0000
ROA not after:            Sat 13 Jun 2026 13:32:08 +0000
asID:                     262507
IP address blocks:        177.55.160.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.crl
                          rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 15:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e4:88:ae:69:34:bb:02:85:b2:eb:c9:e1:25:d2:7b:a2:36:86:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FACBE837964A181010E5EBCBABD77E727EBA0A71
        Validity
            Not Before: Jun 14 13:27:08 2025 GMT
            Not After : Jun 13 13:32:08 2026 GMT
        Subject: CN=680B989C790A4EC84DC7C481155F7FBB77EEB9ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e0:31:1f:55:fa:0f:59:41:f9:95:3f:e2:70:
                    85:44:dd:c2:78:27:87:91:2c:fb:08:38:ee:92:26:
                    32:47:fa:3c:d5:54:89:8f:d1:68:96:1a:70:54:49:
                    76:7a:c2:97:e2:be:49:78:0d:36:ac:08:6b:c1:38:
                    a4:9d:b1:33:19:81:3e:3c:56:21:1c:56:f3:99:c0:
                    ef:cb:89:97:25:50:9f:ef:af:6f:5b:58:cb:dd:8e:
                    ff:3e:36:81:9c:43:ba:e2:dc:37:50:7d:13:aa:cd:
                    99:ec:18:87:25:38:d2:28:c5:a2:20:54:7c:c9:78:
                    5d:85:e9:ec:9c:37:68:e8:db:bc:8f:c1:67:5c:0a:
                    5b:d8:2c:e9:1f:af:23:a0:b4:61:52:3e:04:8f:53:
                    ee:ce:28:4b:0f:64:dc:f7:18:ee:24:1b:61:e3:40:
                    92:dd:fa:b0:ae:10:e3:2b:1d:f6:ba:ff:0a:c9:f4:
                    33:d9:67:5e:42:74:57:6e:2c:68:51:14:1a:a9:3d:
                    a0:54:55:97:15:86:d1:93:da:d0:ab:73:30:54:a4:
                    48:7e:1c:a9:b2:ce:74:a6:2d:ec:00:51:50:13:b0:
                    65:82:fd:77:ff:d8:9b:78:19:f4:3f:84:1d:88:e8:
                    71:58:06:02:d3:6b:97:4c:97:d2:a2:b0:0d:51:4d:
                    4e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0B:98:9C:79:0A:4E:C8:4D:C7:C4:81:15:5F:7F:BB:77:EE:B9:ED
            X509v3 Authority Key Identifier:
                keyid:FA:CB:E8:37:96:4A:18:10:10:E5:EB:CB:AB:D7:7E:72:7E:BA:0A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136302e302f32302d3332203d3e20323632353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:07:1c:85:1c:ba:0b:de:d4:78:7c:5e:d6:5d:64:9c:bf:54:
         9e:24:1d:4f:42:1f:bb:33:6b:1e:bc:49:33:7e:25:2a:14:35:
         ad:db:8c:56:66:24:ee:de:ad:83:0b:8e:ca:fc:c1:0a:3c:0b:
         fc:0c:c9:4f:50:1f:87:25:0d:1c:f4:a6:96:64:3c:20:78:65:
         35:07:37:bd:5f:f8:d6:9a:f0:8a:e5:40:ed:d7:1e:5e:e1:05:
         ed:a5:fd:63:cd:98:98:e3:ac:89:34:34:fa:60:4a:6f:da:66:
         88:70:98:a8:9f:fe:64:13:92:04:2e:1e:41:89:30:18:58:84:
         5d:26:d3:e0:52:a2:b6:be:69:ba:9e:0c:44:83:f8:06:74:95:
         ff:75:39:a8:cb:14:e7:19:b0:67:0b:56:20:60:71:16:d6:67:
         a3:af:ec:ae:53:2a:f0:e0:d9:8c:76:bd:94:87:46:81:3d:c7:
         77:27:8e:38:53:6b:ea:8e:0c:ac:15:cd:dd:79:bd:53:34:80:
         be:6a:c2:db:52:0f:01:6f:80:63:23:4a:84:28:d6:11:d2:14:
         ee:d4:19:ff:42:af:a6:c7:6b:04:b0:05:61:b0:80:56:9e:43:
         29:4b:df:66:74:f7:35:a6:88:c6:b7:d1:74:47:39:c3:17:d7:
         27:52:6f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:44:50 2025 by rpki-client